Overview

overview

10

Static

static

3

bf9c8f42bf...0N.exe

windows7-x64

10

bf9c8f42bf...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bf9c8f42bf851d549628785eeb8e24c0N.exe

  • Size

    211KB

  • Sample

    240721-pb5vxazfkb

  • MD5

    bf9c8f42bf851d549628785eeb8e24c0

  • SHA1

    f006a157eaf6370a612e89c46c666b7eadbf80f7

  • SHA256

    a59ba698c872fd32a989a90756b8fd93e0c593edd50a75cb89413dc312b70e47

  • SHA512

    0c804899f5cffda89cda644ef728119198d4bbdd3fe80f24b9046c5d382fa1554aaa8ecc46f53590bf9698da97ab9a578f388d3860dd03777ef8b5a755dd270f

  • SSDEEP

    3072:JD6Xtx68yygRBE52mxkEOHLRMpZ4deth8PEAjAfIbAYGPhz6sPJBInxZqOo:Jh8cBzHLRMpZ4d1Zo

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      bf9c8f42bf851d549628785eeb8e24c0N.exe

    • Size

      211KB

    • MD5

      bf9c8f42bf851d549628785eeb8e24c0

    • SHA1

      f006a157eaf6370a612e89c46c666b7eadbf80f7

    • SHA256

      a59ba698c872fd32a989a90756b8fd93e0c593edd50a75cb89413dc312b70e47

    • SHA512

      0c804899f5cffda89cda644ef728119198d4bbdd3fe80f24b9046c5d382fa1554aaa8ecc46f53590bf9698da97ab9a578f388d3860dd03777ef8b5a755dd270f

    • SSDEEP

      3072:JD6Xtx68yygRBE52mxkEOHLRMpZ4deth8PEAjAfIbAYGPhz6sPJBInxZqOo:Jh8cBzHLRMpZ4d1Zo

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks